topic Re: Help with migrating a single gateway to cluster with new hardware in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Help-with-migrating-a-single-gateway-to-cluster-with-new/m-p/188634#M34732 <P>Since you manage all GWs from the same SMS, there is no need to import or migrate policy. Configure a new cluster in a lab, with VIPs corresponding to your single GW in the DR-DC, apply the same policy to that cluster, swap the GWs.&nbsp;</P> Fri, 04 Aug 2023 09:11:17 GMT _Val_ 2023-08-04T09:11:17Z Help with migrating a single gateway to cluster with new hardware https://community.checkpoint.com/t5/Firewall-and-Security-Management/Help-with-migrating-a-single-gateway-to-cluster-with-new/m-p/188375#M34695 <P>Hello there,</P><P>Hope someone can help with this request.</P><P>We have two data centers: a main data center (main-DC) and a disaster recovery data center (DR-DC). In the main-DC, we have two security gateways (6500s on R81.10) configured as a cluster. In the DR-DC, we have a single security gateway (5200). All of these gateways are managed by a management server located in the main-DC.</P><P>We are planning to move to a new DR-DC and replace the single security gateway with two 6600s configured as a cluster. The new gateways will also be managed by the management server in the main-DC.</P><P>Our question is, what is the best way to achieve this migration? Specifically, we are interested in how to import the policy from the single security gateway to the cluster security gateway.</P><P>&nbsp;</P><P>Thanks&nbsp;</P> Wed, 02 Aug 2023 08:41:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Help-with-migrating-a-single-gateway-to-cluster-with-new/m-p/188375#M34695 ASK74 2023-08-02T08:41:10Z Re: Help with migrating a single gateway to cluster with new hardware https://community.checkpoint.com/t5/Firewall-and-Security-Management/Help-with-migrating-a-single-gateway-to-cluster-with-new/m-p/188634#M34732 <P>Since you manage all GWs from the same SMS, there is no need to import or migrate policy. Configure a new cluster in a lab, with VIPs corresponding to your single GW in the DR-DC, apply the same policy to that cluster, swap the GWs.&nbsp;</P> Fri, 04 Aug 2023 09:11:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Help-with-migrating-a-single-gateway-to-cluster-with-new/m-p/188634#M34732 _Val_ 2023-08-04T09:11:17Z